A county security draft for clinic micro-segmentation should be saved so reviewers can inspect it before it is published to the fabric. What Policy-mode GUI feature should the operator use?
Select an answer to reveal the explanation.
Short Explanation
Think of a draft ordinance that sits on the clerk's desk before it becomes law. Policy-mode DFW drafts hold clinic rules for review without publishing them. Instant publish, Manager-only staging, and App Volumes are not that desk.
Full Explanation
NSX-T Policy mode includes Distributed Firewall drafts so operators can stage and review a county security draft for clinic micro-segmentation before publish. Think of a draft ordinance that sits on the clerk's desk before it becomes law—drafts hold clinic rules for reviewers without publishing them to the fabric yet. Forcing immediate publish on every rule removes that review step. Manager mode is not the interface that provides Policy DFW drafts. Horizon App Volumes assignments deliver applications; they do not store unpublished NSX security policy. Exam caveat: drafts must still be published to enforce; staging is not enforcement until publish succeeds. Operational check: create a DFW draft with clinic rules, have a reviewer inspect it in the GUI, publish when approved, and confirm Immediate-publish-only, Manager-only staging, and App Volumes were not used as the draft feature. Document the civic rationale in the change record so the next operator can restate why the correct control matches the agency outcome, why each distractor fails by concept, and which NSX Manager view confirms the result after publish. Document the civic rationale in the change record so the next operator can restate why the correct control matches the agency outcome, why each distractor fails by concept, and which NSX Manager view confirms the result after publish.